skills/craftos-dev/craftbot/tesla/Gen Agent Trust Hub

tesla

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes the teslapy library, a well-known community package for the Tesla API, which is retrieved from the standard Python Package Index (PyPI).
  • [SAFE]: The skill implements secure authentication practices by using Tesla's OAuth flow. It stores refresh tokens in a local cache file (~/.tesla_cache.json) and explicitly avoids requesting or storing user passwords.
  • [SAFE]: A significant security control is implemented via disable-model-invocation: true in the frontmatter. This ensures that the AI agent cannot autonomously trigger vehicle commands (such as unlocking doors or honking) without a direct user prompt.
  • [COMMAND_EXECUTION]: The skill executes a local Python script to interact with the vehicle API. The script is transparently written, focusing exclusively on vehicle management tasks like climate control, charging, and locking operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 05:36 PM
Security Audit — agent-trust-hub — tesla